TLDRBins

TLDRBins is a repo for cybersecurity researchers to quick search for commands.

This repo is designed to be simple and straightforward, with a focus on providing quick and easy access to useful information.

If you’re someone who likes to do cybersecurity research or CTF this repo is perfect for you. We encourage you to give us a star on GitHub.

TLDRBins is a project created by jojo9846.

TLDRBins provides penetration testing resources for educational and authorized use only. All activities must comply with applicable laws and require explicit permission. Unauthorized or unethical use is strictly prohibited, and we are not liable for misuse of this information.

Title	Tags
Account Operators	Active Directory Privilege Escalation Account Operators Credential Dumping LAPS Group Membership Abuse Evil-Winrm Powerview Windows Create User
AD Recycle Bin	Active Directory AD Recycle Bin Privilege Escalation Object Recovery Deleted Objects Restore Domain Controller Windows PowerShell
ADCS	Kerberos Pass-the-Ticket Certify Credential Dumping Ldap Pass-the-Hash Ticket Granting Ticket Domain Controller Certificate Services Active Directory Windows ADCS Pass-the-Cert Lookup SID
AddKeyCredentialLink	Shadow Credentials Pass-the-Cert AddkeyCredentialLink Active Directory Windows Whisker Pywhisker
AddMember	Powerview AddMember Domain Controller Active Directory Windows BloodyAD
AddSelf	Powerview Genericall AddMember Group Policy Domain Controller Addself Active Directory Windows BloodyAD
ADFS	SAML Token-Based Authentication ADFS Active Directory Windows Federation Services
ADIDNS	Domain ADIDNS ADDS DNS PowerMad DNS Posioning Spoofing Windows Active Directory
Advance wget	Wget Http File Transfer File Transfer Http
AllowedToDelegate	Pass-the-Ticket Silver Ticket Ticket Granting Ticket AllowedToDelegate Active Directory Windows AddAllowedtoAct AllowedToAct
Alternate Data Stream	File Metadata Alternate Data Stream ADS Windows Hidden Files
Android	Android Apk Decompile Java Reversing Apktool Adb Mobile App
Apache	Web Exploitation Waf (Web Application Firewall) Apache Web Server
Apache Tomcat	Web Exploitation Tomcat Apache Web Server War Java RCE
Apt	Mitm Mitmproxy Apt Apt-Get Sudo Ubuntu Debian Package Management
ASMI Bypass	ASMI Bypass ASMI Anti-Virus Windows
AWS	AWS Cloud S3 Bucket Dynamodb Lambda
Azure AD Connect	Azure AD Connect Secretsdump ADSync Password Active Directory Windows
Azure Enum	Cloud Azure Password Spraying Enumeration Microsoft Windows Reconnaissance
Bloodhound	Bloodhound Sharphound Sliver Enumeration Active Directory Windows Neo4J DNS Dnschef Ldap Ldapsearch
Built-in Group	Built-in Group Windows Windows Service
Cloud Enum	OSINT Cloud Azure AWS Google Enumeration
Compressed Files	Compress Decompress Extract Zip Unzip Gz Tar Rar 7Z Bz
Connection from Public Internet	Web Exploitation Http File Transfer Remote File Inclusion XSS File Transfer Public Ip Ngrok Serveo Webhook XXE
Constrained Delegation	Credential Dumping Impacket Pass-the-Ticket Silver Ticket Ticket Granting Ticket Constrained Delegation Active Directory Windows RBCD KCD
CouchDB	Database Dumping Couchdb Database
Create custom dll	Dll Hijacking Dll Cpp Template
Cron Jobs	Cron Scheduled Tasks Linux
Cross Session Relay	NTLM Pass-the-Hash Authentication Cross Session Relay Active Directory Windows Krbrelay Remotepotato0
curl	Path Traversal Curl Http File Transfer Http File Transfer CRUD Api
Custom Word List Generator	Password Cracking Wordlist Cewl Username
Disk Group	Privilege Escalation Data Exfiltration File System Mounting Disk Backup Privilege Read Container LVM Debugfs
DNS	Domain Reconnaissance Enumeration DNS Dig Zone Transfer BIND Nsupdate Nslookup
Docker	Forensic Docker Container Dive Virtualization
Docker Registry	Database Dumping Docker Container Docker Registry
Domain Trusts	Active Directory Privilege Escalation Domain Trusts Parent-Child Trust Kerberos Golden Ticket Mimikatz Rubeus Pass-the-Ticket Ticket Granting Ticket Credential Dumping Cross-Domain Attack Windows
Dotnet	Dotnet SDK C# Windows Compile .Net Programming
DPAPI	Credential Dumping Mimikatz DPAPI Windows Password Donpapi
Drupal	Reconnaissance Enumeration Drupal Droopescan
Elasticsearch	Database Dumping Elasticsearch Database
Electron	Web Exploitation Electron Web
ExecuteDCOM	Executedcom Active Directory Windows RCE
File Transfer (Linux To Linux)	Scp Http File Transfer File Transfer Nc
File Transfer (Linux to Windows)	Curl Http File Transfer File Transfer Windows Evil-Winrm IEX IWR Certutil
File Transfer (Windows To Linux)	SMB File System Mounting Http File Transfer Remote File Inclusion File Transfer Windows Evil-Winrm
File Transfer (Windows To Windows)	SMB File System Mounting Remote File Inclusion File Transfer Windows
Find	File Metadata Enumeration File Attributes Hidden Files Find Linux File System SUID SGID Interesting Files Locate
Find (Windows)	File Metadata Hidden Files File Attributes Find Files Windows
Finger Protocol	Enumeration Finger File Transfer
Firefox	Password Cracking Firefox Mozilla Credential Dumping Password
Firewall (Linux)	Firewall Inbound Outbound Network Linux Access Control Iptables
Firewall (Windows)	Firewall Inbound Outbound Network Windows Access Control
Flask Cookie	Flask Python Cookie Sign Unsign Web Exploitation
ForceChangePassword	Forcechangepassword Powerview Active Directory Windows BloodyAD
Forward Shell	Reverse Shell Python Shell Forward Shell Template
FTP	FTP LFTP File Transfer Secure Transfer
GenericAll	Shadow Credentials Powerview Credential Dumping AddMember Impacket Genericall Domain Controller Active Directory Windows
GenericWrite	Shadow Credentials Pass-the-Ticket Kerberoasting Genericwrite Powerview Asreproast Credential Dumping Ticket Granting Ticket Active Directory Windows Disabled Account
GetChanges/GetChangesAll	Dcsync Getchanges Getchangesall Secretsdump Active Directory Windows
Git	Git Git-Dumper Sudo Enumeration Web Exploitation Gitea Repo Clone
GPG	Cryptography Encryption File Encryption Gpg Pretty Good Privacy Public Key Private Key
GPOs	GPOs Windows Group Policy Objects WriteGPLink
Graphql	Database Dumping Privilege Escalation in Databases Graphql Database
Grep	Grep Regex Strings Enumeration Files
Hydra	Hydra Password Cracking Brute Force Authentication Web Exploitation Credential
IIS	IIS Web Server Windows
IMAP	Imap Imaps Mail Email OpenSSL Enumeration
IP Routing	Networking IPRouting Linux Windows Iproute2 Netsh PowerShell NetworkAdministration SystemAdministration Routing
IRC	IRC Internet Relay Chat Software
Java	Java Jd-Gui Decompiler Reversing Programming
Java Environment	Java Javac Update-Alternatives
Java RMI	Java RMI JMX Remote Method Invocation Api JVM Enum Rmg Beansshooter
Joomla	Joomla Cms Web Exploitation
JWT	Jwt Jwks Cookies Cryptography Web Exploitation Token-Based Authentication
Keepass	Password Cracking Hash Cracking Keepass Kpcli Password Kdbx
Kerberoasting	Kerberos Impacket Kerberoasting Asreproast Rubeus Domain Controller Active Directory Windows GetNPUsers
Kerberos	Kerberos Pass-the-Ticket Hash Cracking Rubeus Password Cracking Sliver Enumeration NTLM SMB Kerbrute Pass-the-Hash Impacket Ticket Granting Ticket Domain Controller Active Directory Windows Krb5 Keytab SSSD
KrbRelayUp	KrbRelayUp Active Directory Local Privilege Escalation Kerberos Relay LDAP Signing Shadow Credentials ADCS Web Enrollment RBCD S4U2Self SCMUACBypass
Krbrelayx	Dns Spoofing Krbrelayx Dnstools Active Directory Windows DNS NTLM
Kubelet	Kubelet Kubernetes Container RCE
Kubernetes	Token-Based Authentication File System Permissions Vulnerabilities File System Mounting Kubernetes Container
LDAP	Kerberos Ldap Nmap Ldap Search Enumeration Active Directory Windows Nxc Ldapmodify Ldif Permissions
LDAP Relay	Attack Chain NTLM Ldap Pass-the-Hash Impacket NTLM Replay Petitpotam Active Directory Windows WebDAV Ticket Granting Ticket RBCD Secretsdump
Linux hard disk encryption	Luks Password Cracking Brute Force Encryption File Encryption Linux Hard Disk Encryption Mount File System
Listeners	Ncat Listener Reverse Shell Nc Pwncat
Lxd	File System Permissions Vulnerabilities File System Mounting Lxd Lxc Container
Machine Account	Kerberos Credential Dumping Pass-the-Ticket Rubeus Ticket Granting Ticket Domain Controller Machine Account Microsoft Virtual Account Active Directory Windows
Magic Bytes	File Upload Vulnerability File Metadata File Carving Bypass Magic Bytes Png
Memcache	Memcache Telnet Database Dumping
Memory Dump	Forensics Credential Dumping Binwalk Dmp Memory Dump Reversing Minidump Backup Image
Metasploit	Exploitation Post-Exploitation Searchsploit Metasploit Vulnerability Scanning Exploit Meterpreter Windows Msfconsole
Metasploit Listener	Metasploit Firewall Shellcode Listener Reverse Shell Msfconsole
Metasploit Shellcode	Code Execution Metasploit Firewall Payload RCE Dll Hijacking Shellcode Reverse Shell Msfconsole Msfvenom Revshell
Microsoft Access Database	Database Dumping Access Database Windows Mdb
Microsoft Oulook Email Folder	Outlook Email Windows Pst Ost Mbox
MongoDB General	Database Dumping Mongodb Database Enumeration
MSSQL Agent Jobs	Database Dumping Privilege Escalation in Databases MSSQL Database Windows Agent Jobs
MSSQL General	Database Dumping Privilege Escalation in Databases MSSQL Database Windows
MSSQL Linked Servers	Database Dumping Privilege Escalation in Databases MSSQL Database Windows Linked Server
MSSQL Privilege Escalation	Hash Cracking Privilege Escalation NTLM MSSQL Database Windows RCE Enum Domain Users SID NTLM Relay
MySQL General	Database Dumping Privilege Escalation in Databases MySQL Database
MySQL Privilege Escalation	Exploitation Privilege Escalation in Databases MySQL RCE Database Php UDF
NetExec (nxc)	Ldap Crackmapexec Rid Brute Force SMB Ldap Search Enumeration Domain Controller Nxc Active Directory Windows Winrm
Network Discovery	Port Scanning Arp Iptables Tcpdump Packet Sniffing Reconnaissance Port Network Discovery Ping Traceroute
Network Traffic Pivoting	Pivoting Sliver Pivot Chisel SSH Network Socat Port Forwarding Tunneling Metasploit
Nginx	Web Exploitation Nginx Web Server Reverse Proxy
Nmap	Port Scanning Nmap Reconnaissance Tcp/Ip Vulnerability Scanning Enumeration Port Network Discovery Network Mapping Host
Npm	Npm Nodejs Sudo Exploitation
NTLM Relay Attack	Shadow Credential NTLM Ldap Pass-the-Hash Impacket NTLM Replay Petitpotam Active Directory Windows ADCS WebDAV Pkinit Ticket Granting Ticket
NTP	NTP Time Network Time Protocol Faketime Ntpdate
OpenSSL	Web Exploitation OpenSSL Certificate Certificate Signing Request TLS CSR Pem P12 Key CRT RSA PFX
OpenVPN	VPN Openvpn Network
Oracle Database	OracleDB File System Permissions Vulnerabilities Database Dumping Brute Force Enumeration Privilege Escalation in Databases Database Sqlplus Odat Reverse Shell RCE
Padding Oracle	Encryption Cryptography Web Exploitation Padding Oracle Padbuster Aes Cbc Cipher
Password Cracking	Hash Cracking Password Cracking File Encryption John the Ripper Hashcat Wordlist Generate
Persistence	AddMember Account Windows Persistence
Phishing	Phishing Social Engineering Responder Phishing Campaigns Email Xll Excel Hta Shortcut Windows Odt Libre Vba NTLM Theft Pdf NTLM
PHP Command Shell	Reverse Shell Php Shell Template Web Exploitation File Upload Vulnerability Log Poisoning
Pip	Exploitation Pip Pip3 Python Sudo
POP3	Pop3 Telnet Mail Email Enumeration
Port Knocking	Port Knocking Knockd SSH Authentication
PostgreSQL	Database Dumping Privilege Escalation in Databases Postgresql RCE Database File Read
Pre-Windows 2000 Computer	Domain Controller Pre-Windows 2000 Computer Active Directory Windows Pre2k Pre-Created Computer STATUS_PASSWORD_MUST_CHANGE
Pypi	Exploitation Python Pypi Package RCE
Python Decompile	Python Pyc Decompile Uncompyle6 Reversing Pyinstxtractor
R Services	R Services Rlogin Rexec Rsh R-Commands Shell Berkeley Uid Gid
rbash	Rbash Shell Escape Tar Bypass Breakout Restricted Shell
RBCD Attack	Pass-the-Ticket Pass-the-Hash Silver Ticket Ticket Granting Ticket Active Directory Windows RBCD Resource-Based Constrained Delegation S4U Impersonate Credential Dumping Genericall WriteAccountRestrictions SPN-Less
RDP	RDP Remote Desktop Windows Xfreerdp
ReadGMSAPassword	Credential Dumping ReadGMSApassword Gmsadumper Active Directory Windows
ReadLAPSPassword	Credential Dumping Powerview ReadLAPSpassword Active Directory Windows LAPS
Redis	Redis-Cli Redis Exploitation Database
Registry	Windows Registry Reg.exe Windows Internals Persistence COM Hijacking DLL Injection
Retrieve Flask Debug Pin	Local File Inclusion Web Exploitation Credential Dumping Python Flask Werkzeug Debug LFI
RPC	Impacket Domain Controller Nxc Active Directory Windows Enumeration SID
Rsync	Rsync Password Cracking Enumeration
Runas	PowerShell Credential Object Windows Runas UAC SavedCred Cmdkey
Samba	Samba Kerberos Backup Linux SMB Ldb Pass-the-Hash Restore Database
SCCM	SCCM System Center Configuration Manager Active Directory Windows Configuration Management
Scheduled tasks	Enumeration Scheduled Tasks Windows Enum
Searchsploit	Exploitation Exploit-Db Cve-Search Post-Exploitation Searchsploit Vulnerability
SeBackupPrivilege/SeRestorePrivilege	Credential Dumping File System SeBackupPrivilege SeRestorePrivilege Windows Backup Operators Diskshadow SAM SECURITY SYSTEM NTDS.DIT
Secrets Dump	SAM SYSTEM SECURITY Dcsync Impacket Secretsdump Domain Controller Credential Dumping Active Directory Windows NTDS.DIT Hive LAPS
Secure String	PowerShell Secure Strings Windows Decrypt
SeDebugPrivilege	SeDebugPrivilege Windows Metasploit Reverse Shell
SeEnableDelegationPrivilege	SeEnableDelegationPrivilege Pass-the-Ticket Service Ticket Ticket Granting Ticket Constrained Delegation Active Directory Windows KCD Secretsdump Unonstrained Delegation
SeImpresonate	SeImpresonate Windows Potato Privilege Escalation Fullpower Scheduled Tasks
SeLoadDriverPrivilege	Exploitation SeLoadDriverPrivilege Privilege Escalation Windows Reverse Shell
SeTcbPrivilege	SeTcbPrivilege Windows Privilege Escalation
Shadow Hash Cracking	Password Cracking Hash Cracking John the Ripper Hashcat Shadow Unshadow Passwd
Share Mount	NFS Mount SMB File System Mounting Enumeration Share Cifs File System Permissions Vulnerabilities Privilege Escalation Uid
Silver Ticket	Pass-the-Ticket SID Rubeus Ticket Granting Ticket Silver Ticket Sidhistory Domain Controller Active Directory Windows GetUserSPNs
SMB Enum	Kerberos Nmap SID Smbclient Mount Enumeration SMB Impacket Reconnaissance Windows ADS GPP Group Policy Preference SYSVOL
SMB Server	SMB Server File Transfer NTLM SMB Windows Share NET
SMTP	Nmap Enumeration SMTP Mail Email Template
SNMP	Reconnaissance Enumeration SNMP Snmpwalk Onesixtyone Database Dumping
SQL Injection	SQL SQL Injection MySQL Sqlmap Nosql Sqlite SQLi Burpsuite Database Dumping Database
SQLite	Database Dumping Enumeration Sqlite Database
Squid Proxy	Port Scanning Enumeration Squid Proxy Web Proxy
SSH	SSH Private Key Public Key Id_Rsa Ppk Pem Openssh Remote Access SFTP
SSL	Ssl Sslscan Reconnaissance
Steganography	Steganography Steghide Steg Exiftool Ctf
Subdomain Enum	Gobuster Enumeration Web Subdomain Wfuzz Http Hosts Reconnaissance Vhosts
Sudoers	Sudoers Sudo Privilege Escalation /Etc/Sudoers
TFTP	Tftp File Transfer
Time Roasting	NTP Hash Cracking Time Roasting Enumeration Domain Controller Active Directory Windows
UAC Bypass	UAC Bypass Windows Security Privilege Escalation Fodhelper Windows Registry PowerShell System Administration
Unconstrained Delegation	Pass-the-Ticket S4U Ticket Granting Ticket Unconstrained Delegation Active Directory Windows PsExec
Upgrade Shell	Reverse Shell Shell Python Bash Sh Tty Socat
VNC	VNC Remote Desktop Software
Volume Shadow Copies	Data Leakage Data Exfiltration Volume Shadow Copies Enumeration Windows VSC
VPN	VPN Internet Key Exchange IKE Network IPSec Password Cracking PSK
Web Directory Enum	Waf (Web Application Firewall) Gobuster Enumeration Reconnaissance Web Directory Feroxbuster Wfuzz IDOR .Ds_Store
WebDAV	Http File Transfer Curl WebDAV Http Web Enumeration WebClient Service Windows
WebDriver	WebDriver ChromeDriver Privilege Escalation Chrome Selenium Api
WHOIS	Domain WHOIS DNS Reconnaissance Network Registrar Organisational Contact IP Address Block
Windows ACLs	Acls Icacls Windows Access Control Lists Files Permissions Encrypted File RunasCs
Windows Code Signing	Code Signing Executable Certificate CA Signtool Authenticode Digital Signature AppLocker Defender WDAC Windows
Windows Defender	Bypass Defender AV Anti-Virus Windows
Windows Event Logs	Forensics Evtx Event Logs Windows DIFR
Windows Processes	Processes Tasklist Dll Services Monitor Background Tasks Windows
Windows RPC	Impacket Windows RPC Windows COM Enumeration
Windows Services	Server Operators Active Directory Windows Privilege Escalation Services Reverse Shell Unquoted Service Path
Winrm	Kerberos Pass-the-Hash RCE Evil-Winrm Windows Pass-the-Ticket Pass-the-Cert Winrm PsExec AtExec
Winrm from Windows VM	Kerberos Pass-the-Ticket Domain Http File Transfer Authentication Ticket Granting Ticket Domain Controller Winrm Pssession Windows File Transfer Active Directory
Wordpress	Wpscan Wordpress Reconnaissance Enumeration
Writable /etc/passwd	Passwd Shadow /Etc/Passwd Privilege Escalation
WriteDacl	Writedacl Dcsync Powerview Credential Dumping Active Directory Windows
WriteOwner/Own	WriteOwner Permissions Powerview Impacket AddMember Domain Controller Active Directory Windows Dacledit Own
WriteSPN	WriteSPN Targeted Kerberoast Domain Controller Active Directory Windows
WSUS	WSUS Windows Server Update Services SharpWSUS Patch Management Update Deployment Lateral Movement Microsoft Updates System Administration Network Security
X11	X11 X X Window System GUI Screenshot
XXE (XML External Entity)	Web Exploitation XXE Xml Dtd Web Remote File Inclusion Data Exfiltration PHP FIlter LFI Local File Inclusion
Zabbix	Zabbix Api Monitoring Web Exploitation RCE